~/.ssh/config

~/.ssh/known_hosts

~/.ssh/authorized_keys

The command= option allows for some very interesting uses. For instance, see how Gitolite uses it. Gitolite effectively creates a "whole new set of users+permissions, nested within (but separate from) the Unix users+permissions."